A Client Can Access Network File System Resources Even Without Specific Access to the Resource (289826)
The information in this article applies to:
- Microsoft Windows Services for UNIX 2.0
This article was previously published under Q289826 SYMPTOMS
A client computer may be able to access network file system (NFS) resources even though the client has not been given specific access to the resource.
CAUSE
This problem can occur because the client has the same name as an NFS client group.
RESOLUTION
To resolve this problem, ensure that the name of the NFS client group is unique. The group name must not be the same as any existing client name. When you create an NFS share, you can assign permissions to specific clients or client groups. If a client group name is the same as an existing client or host name, the permissions granted to the client group are also granted to the client with the same name. The NFS server cannot check if a particular name is either a client or group name.
STATUSMicrosoft has confirmed that this is a problem in the Microsoft products that are listed at the beginning of this article. MORE INFORMATION
In NFS networks, the permissions can be granted based on either client or host names. An NFS client group is a logical collection of clients.
| Modification Type: | Minor | Last Reviewed: | 1/20/2006 |
|---|
| Keywords: | kbbug kbfix kbUNIXService KB289826 |
|---|
|